WHAT IS CLAIMED IS: 

1. A computer system connected to a data communications network , 
comprising: 

a first computer; 

a second, redundant computer that is independent of the first computer; 

wherein the first computer is configured to match with the second computer by 
comparing a first work result of the first computer with a second work result of the 
second computer; 

wherein receipt of data from the data communications network is limited to 
the first computer; 

wherein transmission of data to the data communications network is limited to 
the second computer; 

wherein at least an initial processing of the data received from the data 
communications network is limited to the first computer; and 

wherein the first computer is configured to store non-verified or non-verifiable 
data received by the first computer in the second computer only in non-processable 
form. 

2. The computer system as claimed in claim 1, wherein the first computer is 
configured to verify the received data in the first computer, and wherein the first 
computer is configured to supply only verified data to the second computer in 
processable form. 
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3. The computer system as claimed in claim 1, wherein the first computer and 
the second computer are configured to independently verify the received data, and 
wherein only matching verified data are stored in the second computer in processable 
form. 

4. The computer system as claimed in claim 1, further comprising: 
a central data memory, 

wherein direct access to internal data of the computer system contained in a 
central data memory is limited to the second computer; and 

wherein the first computer is configured to receive the internal data only upon 
request via the second computer. 

5. The computer system as claimed in claim 1, further comprising: 
an independent, redundant third computer; and 

wherein the second computer is configured to match with the third computer 
by comparing the second work result of the second computer with a third work result 
of the third computer. 
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6. A method, comprising: 

in a first computer, classifying data received from a data communications 
network as verified data and non- verified data, and producing a first work result 
representing the verified data; 

forwarding the verified data in processable form and the non-verified data in 
non-processable form from the first computer to a second computer; 

in the second computer, independently verifying the verified data forwarded 
from the first computer and producing a second work result based on the independent 
verification; 

comparing the first work result with the second work result; and 

if the first work result and the second work result match, storing the verified 
data in the second computer. 

7. The method of claim 6, wherein only the first computer receives data from 
the data communications network and only the second computer transmits data to the 
data communications network. 

8. The method of claim 6, wherein only the second computer directly accesses 
internal data contained in a central data memory, and wherein the first computer 
indirectly accesses the internal data only upon request via the second computer. 
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9. The method of claim 6, further comprising matching the second work result 
of the second computer with a third work result of a third computer. 
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